2
Hi,
I 've just find the answers myself.
Ok, to prevent users with admin right of Extended Profiles module (but not "webmaster") from deleting webmasters , I added the following codes at line 187 of admin/user.php of the module.
le="color: #000000"><?php case "delete": $obj =& $handler->getUser($_REQUEST['id']); /*modified for better protect of webmaster group*/ $group_ids = $member_handler->getGroupsByUser($obj->getVar('uid')) ; // true if current user is in group ID #1, that is webmaster group if ($in_group = in_array(1, $group_ids)){ redirect_header('user.php', 3, _PROFILE_AM__CANNOTDELETEADMIN); exit(); } /*modified for better protect of webmaster group*/
By doing this, however, you have to remove the user from "webmaster" group before deleting it. Though it's a little bit inconvenient, it's more secure, in my own opions.
Regards
Cody
